CVE-2020-7037

HIGH 8.1CVE-2020-7037 · Published 28/04/2021 · updated 17/06/2026

In short

CVE-2020-7037 is a HIGH (CVSS 8.1) vulnerability affecting equinox conferencing (avaya).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 64.7% of all vulnerabilities.
Fix: update to 9.1.11 or later.

Package	Affected versions	Patched versions
equinox conferencing avaya	`≥ 9.0.0, < 9.1.11`	`9.1.11`

Description

An XML External Entities (XXE) vulnerability in Media Server component of Avaya Equinox Conferencing could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system or even potentially lead to a denial of service. The affected versions of Avaya Equinox Conferencing includes all 9.x versions before 9.1.11. Equinox Conferencing is now offered as Avaya Meetings Server.

References

support.avaya.com/css/P8/documents/101075574 · Vendor Advisory

More vulnerabilities in equinox conferencing

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free